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DETAILED ACTION 

1. Claims 1-3, 5-9, 17-19, 25-27, and 29-30 are pending. 

2. Amendment files 04/30/2007 has been received and ■ 
considered. 

Claim Rejections - 35 USC §103 

3. The following is a quotation of 35 U.S.C. 103(a) which 
forms the basis for all obviousness rejections set forth in this 
Office action: 

(a) A patent may not be obtained though the invention is not identically 
disclosed or described as set. forth in section 102 of this title, if the 
differences between the subject matter sought to be patented and the prior 
art are such that the subject matter as a whole would have been obvious at 
the time the invention was made to a person having ordinary skill in the 
art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

4. Claims 1-3, 5-9, 17-19, 25-27, and 29-30 are rejected under 
35 U.S.C. 103(a) as being unpatentable over Matyas, Jr. et al 
(US 6687375), in view of Chen et al (US 6182220), in view of 
Hardy et al (US 6073242), in view of Menezes.et al (Handbook of 
Applied Cryptography) and further in view of Bening et al. (US 
6061819) . 

As per claims 1, 17 and 25, Matyas Jr. et al discloses 
initializing a pseudo-random number generator (PRNG); obtaining 
local seeding information from a host; obtaining additional 
seeding information from one or more sources; and mixing the 
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PRNG with the local seeding information and the additional 
seeding information (see column 9 lines 19-34 and 45-67) to 
perform one or more of providing an unpredictable system- status, 
amplifying entropy, and enhancing system security (see column 9 
lines 45-67) . 

Matyas Jr. et al fails to disclose securely obtaining 
additional seeding information from remote entropy servers. 

However, Chen et al teaches obtaining seeding information 
from a remote entropy server (see column 1 line 66 through 
column 2 line 9) . 

At th.e time of the invention it would have been obvious to 
a person of ordinary skill in the art to obtain the additional 
seeding information . of Matyas Jr. et al from the server of Chen 
et al. 

Motivation to do so would have been too update passwords on 
the server (see Chen et al column 4 lines 15-39) . 

The modified Matyas Jr. et al and Chen et al system fails 
to disclose the communication between host and server being 
secure. 

However, Hardy et al teaches secure communications (see 
column 3 lines 54-67) . 

At the time of the invention it would have been obvious to 
a person of ordinary skill in the art to use Hardy et al's 
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method of secure communications in the modified system of Matyas 
Jr. et al and Chen et al system. 

Motivation to do so would have been to provide 
confidentiality, authentication and integrity to the 
communications (see column 3 lines 54-67) . 

The modified Matyas Jr. et al, Chen et al, and Hardy et al 
system fails to disclose the specific method of securely 
obtaining the keys, data and obtaining seeding information from 
each location. 

However, Menezes et al teaches the key exchanging (see 
section 12.5.1), the use of temporary keys (see page 494), the 
use of a public key encryption scheme (see section 1.8.1) and 
obtaining a large amount of seeding information (see pages 170- 
171) . 

At the time of the invention it would have been obvious to 
a person of ordinary skill in the art to use the methods of 
Menezes et al to securely obtain the seeding information of the 
modified Matyas Jr. et al, Chen et al, and Hardy et al system 
and for the obtaining to be repeated. 

Motivation to do so would have been to transport the key 
(see section 12.5.1), to limit the available ciphertext (see 
page 494), only the private key must be kept secret (see section 
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1.8.4) and seeds should be sufficiently large so that a' search 
of all seeds in infeasible (see page 171). 

The modified Matyas Jr. et al, Chen et al, Hardy et al, and 
Meaezes et al system fails to explicitly disclose providing an 
unpredictable system status to amplify entropy based on seeding 
information . 

However, Bening et al . teaches such a system status (see 
column 3 lines 37-51). 

At the time of the invention it would have been obvious to 
a person of ordinary skill in the art to use the seeding 
information of the modified Matyas Jr. et al, Chen et al, Hardy 
et al, and Menezes et al system to provide an unpredictable 
system status . 

Motivation to do so would have been to eliminate any 
correlation between values (see Bening et al. column 3 lines "37- 
51) . 

As per claims 2-3 and 26-27, the modified Matyas Jr. et al, 
Chen et al, Hardy et al, Menezes et al and Bening et al. system 
discloses the initializing the PRNG comprises initializing the 
internal state of the PRNG with a random value that is a seed 
(see Matyas Jr. et al column 9 lines 19-34). 

As per claims 5 and 29, the modified Matyas Jr. et al, Chen 
et al, Hardy et al, Menezes et al and Bening et al. system 
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discloses remote entropy servers maintain random state pool to 
supply the host with the random value (see Matyas Jr. et.al 
column 9 lines 45-67), 

As per claim '6-8, the modified Matyas Jr. et al, Chen et 
al, Hardy et al, Menezes et al and Bening et al. system 
discloses the obtaining of the remote seeding information from 
the remote entropy servers is performed via a privacy protocol, 
wherein the privacy protocol comprises secure sockets layer 
(SSL) protocol and transport layer security (TLS) protocol (see 
Hardy et al column 3 lines 54-67). 

As per claims 9 and 30, the modified Matyas Jr. et al, Chen 
et al, Hardy et al, Menezes et al and Bening et al. system 
discloses the stirring the PRNG comprises producing a 
cryptographically random stream of . bits (see Matyas Jr. et al 
column 9 lines 45-67). 

As per claim 18, the modified Matyas Jr. et al, Chen et al, 
Hardy et al, Menezes et al and Bening et al. system discloses 
the local system generates local seeding information (.see Matyas 
Jr. et al column 9 lines' 45-67) . 

As per claim 19, the modified Matyas Jr. et al, Chen et al, 
Hardy et al, Menezes et al and Bening et al. system discloses 
the remote computer systems are to generate the remote seeding 
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information via the remote entropy servers, (see Chen et al 
column 1 line 66 through column 2 line 9) . 

Response to Arguments 

Applicant's arguments filed 04/30/2007 have been fully 
considered but they are not' persuasive . Applicant argues that 
Chen fails to disclose obtaining seeding information from, a 
remote entropy server and none of the references teaches the 
claims as amended. 

With respect to Applicant's argument that Chen fails to 
disclose obtaining seeding information from a remote entropy 
server, in column 2 lines 1-2 Chen teaches that the server 
communicates to the client a random seed value. The server is 
remote from the client and it is providing information to create 
a random value so it is a remote entropy server and the client 
is clearly obtaining the seeding information from this server. 
Therefore, Chen teaches obtaining seeding information from a 
remote entropy server. 

Applicant's arguments -with respect to the amendments to 
claims 1, 17, and 25 have been considered but are moot in view 
of the new ground (s) of . re j ection . 
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Conclusion 

5. Applicant's amendment necessitated the new ground (s) of 
rejection presented in this Office action. Accordingly , THIS 
ACTION IS MADE FINAL. See MPEP § 706.07(a). Applicant is 
reminded of the extension of time policy as set forth in 37 
CFR 1 . 136 (a) . 

A shortened statutory period for reply to this final action 
is set to expire THREE MONTHS from the mailing date of this 
action. In the event a first reply is filed within TWO MONTHS 
of the mailing date of this final action and the advisory action 
is not mailed until after the end of the THREE-MONTH shortened 
statutory period, then the shortened statutory period will 
expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated 
from .the mailing date of the advisory action. In no' event, 
however, will the statutory period for reply expire later than 
SIX MONTHS from the date of this final . action . 

6. The prior art made of record and not relied upon is 
considered pertinent to applicant's disclosure. Sprunk teaches 
the use of a seed to provide an unpredictable system status to 
amplify entropy. 

Any inquiry concerning this communication or earlier 
communications from the examiner should be directed to Michael 
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Pyzocha whose telephone number is (571) 272-3875. The examiner 
can normally be reached on 7:00am - 4:30pm first Fridays of the 
bi-week off. 



unsuccessful , the examiner's supervisor, Emmanuel Moise can be 
reached' on (571) 272-3865. The fax phone number for the 
organization where this application or proceeding is assigned is 
703-872-9306. 

Information regarding the status of an application may be 
obtained from the Patent Application Information Retrieval 
(PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, 
see http://pair-direct.uspto.gov. Should you have questions on 
access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free) . 



If attempts to reach the examiner by telephone are 
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